---
typeId: req
recordId: benac-auth-007
fields:
  title: Agent authentication
  statement: Benac shall support authentication of agent principals or locally
    scoped agent sessions and shall bind agent actions to authenticated agent
    identity where agent authority, package authoring, invocation, storage
    lease requests, compute lease requests, trust requests, or auditing depends
    on attribution.
  rationale: Agents are first-class Benac clients and must be accountable without
    becoming sovereign.
  verification: Have two agents perform package-authoring and trust-request
    actions and verify that records identify the correct authenticated agent or
    local agent session.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 22
---
